Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb8faaa6-59fa-3d4e-8287-e2b637036ac1.roa
File: fb8faaa6-59fa-3d4e-8287-e2b637036ac1.roa (raw, json)
Hash identifier: 9VfZydxcZXYMPYqdeu+knUCm7bCo8/KfP3k8jAnPjzw=
Subject key identifier: C1:60:FE:C2:83:C1:4B:C5:B2:20:AF:D8:69:31:4D:35:4A:A3:35:A1
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858485B6B002A628ABB8CC9A57180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb8faaa6-59fa-3d4e-8287-e2b637036ac1.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 199707
IP address blocks: 108.165.144.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6b:00:2a:62:8a:bb:8c:c9:a5:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=8fcdf90e-f5eb-47af-a37b-a2f46ab78290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:ce:19:45:32:6b:e3:4f:35:97:81:05:f3:
a3:76:c4:43:b6:06:7a:6e:00:82:68:46:ea:2f:fe:
f9:56:a9:11:ad:c8:65:d8:e5:87:68:00:87:59:dd:
1e:4b:f3:ad:98:1f:38:fa:4f:68:eb:b2:45:20:a3:
80:31:e1:0f:df:c1:b2:de:4a:42:20:8e:cb:e8:00:
92:e5:6e:82:40:b8:2f:11:fd:76:f9:88:77:c2:5c:
ac:61:0f:53:58:5a:36:30:d4:83:7d:2c:40:52:b9:
ef:49:0c:eb:fd:8e:b2:ae:7b:3c:b1:22:6e:22:80:
94:3f:97:aa:a1:15:ef:87:ef:4c:bb:f6:82:4f:60:
b4:a3:d8:b9:36:37:94:b6:90:ac:7a:e8:3b:ac:87:
ea:4d:31:9b:cf:b1:4c:0e:bc:c6:53:ca:3b:43:71:
a3:79:39:70:f8:9b:5f:cd:44:cc:91:61:cf:84:6e:
19:55:2b:41:ea:c8:2a:5c:19:34:42:10:05:63:90:
26:c0:8a:31:ef:e8:2f:26:90:31:87:f0:ca:32:e3:
74:d7:43:d4:69:bb:1b:0f:2a:28:67:ed:56:dc:d0:
1c:6e:98:8d:02:bf:eb:c5:43:67:46:10:67:b7:b7:
d4:2f:94:8d:a5:85:19:b9:6a:3d:63:11:17:27:b2:
fe:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:60:FE:C2:83:C1:4B:C5:B2:20:AF:D8:69:31:4D:35:4A:A3:35:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb8faaa6-59fa-3d4e-8287-e2b637036ac1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.144.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:f8:e1:df:93:49:ef:90:81:a9:8e:8f:70:81:aa:1c:3d:a9:
74:a4:04:4a:6b:7e:1e:7f:ff:03:37:e2:ae:c6:28:b7:08:83:
cc:2f:2e:ec:7d:dc:04:f9:73:e9:ee:e8:0b:52:fb:4e:51:f2:
24:14:8e:94:f5:cc:73:fa:c2:b7:e7:fb:e9:c9:fa:e4:1a:0d:
8f:9b:7f:12:c9:51:35:9e:4e:88:6a:b6:54:7d:19:3e:37:b6:
35:ad:34:5b:5c:07:39:d1:95:b4:fa:7e:da:06:f5:6b:9f:23:
92:d4:3d:cf:8b:51:85:56:aa:19:f6:d7:65:e2:92:80:1f:53:
da:79:b2:81:eb:44:24:24:c2:9d:e7:07:dc:0d:c2:61:11:88:
55:2f:3c:2a:fc:e1:be:48:69:73:71:54:0f:90:48:11:9c:8f:
3d:99:71:30:00:84:14:d3:74:0d:20:e8:77:79:1d:5e:77:e3:
4f:67:cb:91:ba:46:e6:b1:54:18:c1:27:bc:ad:37:b5:72:6d:
f1:25:c8:fc:f0:04:f1:59:c3:cb:95:ec:dc:4c:14:56:3e:81:
c6:28:7b:24:41:6e:b2:33:d4:70:a5:5c:a4:1f:68:ba:5f:71:
d1:ff:7f:ea:e0:a2:4b:a5:84:25:59:dd:11:2d:42:fa:8d:0f:
04:27:13:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbawAqYoq7jMmlcYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk
OGZjZGY5MGUtZjVlYi00N2FmLWEzN2ItYTJmNDZhYjc4MjkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz7OGUUya+NPNZeBBfOjdsRDtgZ6bgCCaEbq
L/75VqkRrchl2OWHaACHWd0eS/OtmB84+k9o67JFIKOAMeEP38Gy3kpCII7L6ACS
5W6CQLgvEf12+Yh3wlysYQ9TWFo2MNSDfSxAUrnvSQzr/Y6yrns8sSJuIoCUP5eq
oRXvh+9Mu/aCT2C0o9i5NjeUtpCseug7rIfqTTGbz7FMDrzGU8o7Q3GjeTlw+Jtf
zUTMkWHPhG4ZVStB6sgqXBk0QhAFY5AmwIox7+gvJpAxh/DKMuN010PUabsbDyoo
Z+1W3NAcbpiNAr/rxUNnRhBnt7fUL5SNpYUZuWo9YxEXJ7L+CwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMFg/sKDwUvFsiCv2GkxTTVKozWhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZmI4ZmFhYTYtNTlmYS0z
ZDRlLTgyODctZTJiNjM3MDM2YWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKWQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ/44d+TSe+QgamOj3CBqhw9qXSkBEprfh5//wM34q7GKLcIg8wvLux9
3AT5c+nu6AtS+05R8iQUjpT1zHP6wrfn++nJ+uQaDY+bfxLJUTWeTohqtlR9GT43
tjWtNFtcBznRlbT6ftoG9WufI5LUPc+LUYVWqhn212XikoAfU9p5soHrRCQkwp3n
B9wNwmERiFUvPCr84b5IaXNxVA+QSBGcjz2ZcTAAhBTTdA0g6Hd5HV53409ny5G6
RuaxVBjBJ7ytN7VybfElyPzwBPFZw8uV7NxMFFY+gcYoeyRBbrIz1HClXKQfaLpf
cdH/f+rgokulhCVZ3REtQvqNDwQnE88=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:12:00 2025 by rpki-client